2597 matches found
censys-python
Censys Python Library !WARNING DEPRECATION NOTICE : The Censys Search v1 and v2 APIs will be deprecated soon. Please migrate to the new Censys Platform. 📖 New API Documentation : https://docs.censys.com/reference/get-started 📦 New Python SDK : censys/censys-sdk-python 🖥️ New CLI Tool cencli:...
tsunami-security-scanner
Tsunami Tsunami is a general purpose network security scanner with an extensible plugin system for detecting high severity vulnerabilities with high confidence. To learn more about Tsunami, visit our documentation. Tsunami relies heavily on its plugin system to provide basic scanning capabilities...
Top10
Top10 Official OWASP Top 10 Document Repository OWASP Top 10 2025 - RELEASED We have released the OWASP Top 10:2025 Final: OWASP Top10:2025 Please log any feedback, comments, or log issues here. OWASP Top 10 2021 - SUPERSEDED OWASP Top10:2021 OWASP Top 10 2017 - HISTORIC OWASP Top 10:2017 PPTX...
social-analyzer
Social Analyzer - API, CLI, and Web App for analyzing & finding a person's profile across +1000 social media \ websites. It includes different analysis and detection modules, and you can choose which modules to use during the investigation process. The detection modules utilize a rating mechanism...
dvna
Damn Vulnerable NodeJS Application DVNA Damn Vulnerable NodeJS Application DVNA is a simple NodeJS application to demonstrate OWASP Top 10 Vulnerabilities and guide on fixing and avoiding these vulnerabilities. The fixes branch will contain fixes for the vulnerabilities. Fixes for vulnerabilities...
kodex
Kodex Community Edition - CE is an open-source toolkit for privacy and security engineering. It helps you to automate data security and data protection measures in your data engineering workflows. It offers the following functionality: Read data items from a variety of sources such as files,...
Harden-Windows-Security
Harden Windows Security | A New Threat to Malware Harden Windows Safely, Securely, Only With Official Microsoft Methods How To Use Related Trust Support Security Recommendations Resources License Wiki Basic FAQs Roadmap Donation !IMPORTANT Here are Quick Access Points to Important Sections of thi...
CVE-2023-29489
CVE-2023-29489 Created By AnonGhost Official How To Use ? python3 CVE-2023-29489.py...
CVE-2022-22965-GUItools
CVE-2022-22965 and the official patch have been released. I only published this tool after the official fix was available, so please do not misuse it. No further changes will be made to this tool. It will be archived in a few days once the source code is uploaded. If you need to run it in bulk,...
PT-2026-120490
Security Advisory Due to the critical PHP vulnerabilities CVE-2026-109618 and CVE-2016-109619, we have temporarily suspended potentially affected services, including our official website and https://t.co/74FnLhUods. Services will resume following the release of official PHP patches and verificati...
GO-2026-6782 Nginx UI: nginx config directive denylist (ValidateConfigFile) is bypassable via same-line ";" separation → authenticated directive injection (RCE on the official image) in github.com/0xJacky/Nginx-UI
Nginx UI: nginx config directive denylist ValidateConfigFile is bypassable via same-line ";" separation → authenticated directive injection RCE on the official image in github.com/0xJacky/Nginx-UI...
Nginx UI: nginx config directive denylist (ValidateConfigFile) is bypassable via same-line ";" separation → authenticated directive injection (RCE on the official image)
Summary config.ValidateConfigFile is the security control that blocks dangerous nginx directives js, perl, loadmodule of njs/perl modules, user root. Its directive scanner is bypassable: it splits the config by newlines and inspects only the FIRST token of each line, but nginx separates directive...
CVE-2026-84316 Nginx UI: nginx config directive denylist (ValidateConfigFile) is bypassable via same-line ";" separation → authenticated directive injection (RCE on the official image)
Nginx UI is a web user interface for the Nginx web server. Prior to 2.4.1, config.ValidateConfigDirectives splits configuration by newline and checks only the first directive token on each line even though Nginx permits multiple semicolon-separated directives on one line. An authenticated caller...
CVE-2026-84316
The Nginx UI web user interface (versions prior to 2.4.1 ) is vulnerable to a validation bypass in the config.ValidateConfigDirectives function. The software incorrectly splits configuration by newline and only validates the first token, allowing an authenticated caller to append restricted direc...
CVE-2026-84316 Nginx UI: nginx config directive denylist (ValidateConfigFile) is bypassable via same-line ";" separation → authenticated directive injection (RCE on the official image)
Nginx UI is a web user interface for the Nginx web server. Prior to 2.4.1, config.ValidateConfigDirectives splits configuration by newline and checks only the first directive token on each line even though Nginx permits multiple semicolon-separated directives on one line. An authenticated caller...
CVE-2026-84317 Nginx UI: MCP nginx_config_add skips config directive validation → authenticated nginx directive injection (RCE on the official image)
Nginx UI is a web user interface for the Nginx web server. Prior to 2.4.1, internal/config/validation.go ValidateConfigFile is a security control that blocks dangerous nginx directives — js, perl, loadmodule of the njs/perl modules, and user root. It is enforced on three of the four config-write...
CVE-2026-42637
Unauthenticated Settings Change in PayPlug for WooCommerce Official = 3.1.0 versions...
CVE-2026-42637 WordPress PayPlug for WooCommerce (Official) plugin <= 3.1.0 - Settings Change vulnerability
Unauthenticated Settings Change in PayPlug for WooCommerce Official = 3.1.0 versions...